Three plans. One defence posture.

Pick the entry point that matches your sector and the regulators you report to. Scale up without re-architecting tenants — keys and policy packs travel with you.